Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
File: 1T5Pyhar83QtTaK_nD2abpHpbuU.mft (raw, json)
Hash identifier: ZPbkYAw+cr5OjDaOu3t09IQdJSjWiqSbhMCDQyTbDxs=
Subject key identifier: 99:D4:83:05:05:58:59:C1:14:F5:DC:80:61:27:AE:56:59:E1:F2:8B
Authority key identifier: D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
Certificate issuer: /CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Certificate serial: 01A001DDA01FD335E2E2239CC0028593E7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
Manifest number: 1713
Signing time: Fri 14 Aug 2026 20:01:36 +0000
Manifest this update: Fri 14 Aug 2026 20:01:36 +0000
Manifest next update: Sat 15 Aug 2026 20:01:36 +0000
Files and hashes: 1: 1T5Pyhar83QtTaK_nD2abpHpbuU.crl (hash: PYP13SR/ifF6umKGMfIrFvA0GnKfyK6UgS/DaLlq0wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:a0:1f:d3:35:e2:e2:23:9c:c0:02:85:93:e7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Validity
Not Before: Aug 14 20:01:36 2026 GMT
Not After : Aug 15 20:01:36 2026 GMT
Subject: CN=99d48305055859c114f5dc806127ae5659e1f28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:28:9a:0d:3c:da:60:2f:0d:bf:84:87:42:
f3:91:01:9d:0f:c4:fe:02:62:16:1b:e2:7d:d2:c0:
71:dc:91:f6:e9:4f:05:a0:dd:82:25:9d:45:8c:aa:
ba:b4:d4:2a:32:28:85:14:dd:ec:3c:cc:67:63:8f:
15:a0:5b:89:20:07:d8:3d:c1:a3:81:b0:8d:35:97:
d5:7c:1b:5a:72:56:c0:5d:0d:2a:e2:bc:24:11:96:
00:be:ba:f2:a1:ab:65:b6:17:87:ee:ca:df:4d:c3:
dc:15:9e:11:f6:0e:9b:f0:72:7f:13:20:52:bb:2b:
41:ff:09:c0:2e:08:65:d8:cd:0a:e8:6b:93:fd:11:
c7:08:74:16:06:0a:c6:41:44:42:17:41:8d:4e:90:
6b:f5:87:9f:40:46:f9:82:7e:5a:74:b8:44:38:2b:
73:88:94:8d:33:93:d8:97:cd:0b:6a:3b:d6:be:8f:
ea:1e:8b:25:7e:6f:4e:fa:5e:45:ed:25:74:20:78:
55:4b:f2:d5:bd:8a:02:c9:26:0a:82:d2:fe:cc:9a:
bf:9b:6e:48:84:5f:8d:c7:63:ee:30:5b:1a:91:e8:
89:fb:66:4a:a2:a8:9a:3d:a8:2d:61:36:65:70:89:
39:78:5e:d4:2b:17:f1:5b:29:49:73:81:82:11:08:
ce:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D4:83:05:05:58:59:C1:14:F5:DC:80:61:27:AE:56:59:E1:F2:8B
X509v3 Authority Key Identifier:
keyid:D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ee:a6:e6:30:05:a9:d5:6c:cd:7b:81:26:52:16:2c:ea:50:
d8:d0:a8:01:b2:18:b4:68:81:69:f4:8c:12:c6:0b:7d:f6:23:
fb:39:6d:ae:07:dd:42:9c:4c:5a:3b:02:1b:d7:5c:78:16:e0:
35:74:dc:df:74:8d:c4:2a:06:9a:e2:0f:1a:7d:6c:78:7b:75:
d6:44:18:2a:87:e2:db:28:45:0c:61:17:43:b0:4b:ff:08:e7:
12:7c:c0:8d:43:8e:aa:02:15:87:c8:82:73:06:99:a0:d9:2d:
cf:a2:db:64:c9:64:32:d4:53:64:38:ef:a9:aa:97:f5:85:48:
ba:f5:94:09:e6:1b:67:3d:e7:a4:47:63:50:60:c1:e8:49:13:
14:54:9c:65:9d:7a:5e:cb:97:8a:73:17:dc:66:1e:0c:66:87:
fc:13:c9:d7:6c:43:f0:9a:ef:68:bc:48:2d:d7:ca:79:10:62:
e6:ed:89:cd:3d:0f:33:d5:1a:98:b2:73:49:40:8f:0f:f1:3b:
a7:fa:82:b1:4b:34:1c:bf:55:14:32:1b:47:29:19:d1:4a:1b:
ef:a4:4b:40:ae:92:e6:eb:42:6a:31:c2:23:3a:ba:4b:65:60:
19:98:09:19:04:44:93:a5:ec:73:08:eb:5a:a1:30:5e:f8:3a:
60:04:31:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:21:07 2026 by rpki-client